CVE-2007-0173

Affected software: L2J Statistik Script 0.09 and earlier. Vulnerability: directory traversal in index.php via the page parameter (../) that allows remote inclusion/execution of arbitrary local files, conditional on register_globals being enabled and magic_quotes disabled. Exploitation: demonstrat...